$ rpki-client -vvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft File: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json) Hash identifier: aDntIIomTJ++qDnZKxaKDUGnL+YC7auVocED8MRU5l8= Subject key identifier: F3:EE:AF:49:5C:A3:FC:E5:64:9B:06:A7:9F:DD:D5:C7:E6:4B:51:61 Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 Certificate issuer: /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Certificate serial: 0540 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft Manifest number: 053C Signing time: Fri 30 May 2025 23:40:19 +0000 Manifest this update: Fri 30 May 2025 23:40:18 +0000 Manifest next update: Fri 06 Jun 2025 23:40:18 +0000 Files and hashes: 1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: 71YpMj+pGdLgSowYMZXkOQdemlabO/lvKEjQiwzHn6I=) 2: AE1E5A1AF61C11EBAB08AF17C4F9AE02.roa (hash: L6NkrUDLV6Dmkk8kbRWqS9urNPurijV7bD/FqK/kzIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1344 (0x540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91216AC, serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Validity Not Before: May 30 23:40:18 2025 GMT Not After : Jun 6 23:40:18 2025 GMT Subject: CN=683a41e3-0a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:14:63:0d:18:22:2e:c2:81:f2:70:ae:87: b8:4a:43:d3:55:a4:d3:6b:64:26:33:77:ca:a2:39: 45:87:75:da:1b:a4:7c:7b:a9:8d:06:fa:f3:82:3b: 84:7b:a7:bc:3c:fa:cf:95:27:55:61:e5:37:e0:8e: 94:aa:11:70:33:ba:b3:70:75:89:68:f1:21:fd:43: 5f:2f:42:6f:57:28:3e:83:1a:3d:27:87:6b:bd:8f: a8:a6:21:8f:9b:05:7e:a5:59:5a:f1:63:08:03:d6: 43:74:37:70:56:89:dd:b4:51:a4:af:9f:ec:f6:4e: e0:6e:33:11:fa:82:75:30:59:10:83:67:08:2e:25: 70:f6:0f:8f:ed:eb:8c:18:2d:f3:ee:5f:34:df:f6: 2b:42:87:aa:04:85:ce:af:2e:ea:49:97:65:29:bd: 63:9d:66:c3:84:8e:67:60:10:2c:a5:55:9b:59:1c: 0f:c8:6b:ab:ba:02:2e:ab:3f:90:d3:31:93:aa:12: 18:8d:13:ef:e4:8e:c2:98:93:dd:a8:dd:7e:df:c1: 82:42:d9:ba:4e:9f:7f:1d:9b:98:d4:f4:d3:76:37: f4:1d:b0:d0:aa:98:7a:9f:60:18:df:cb:9b:8e:47: e9:5a:b7:83:e0:1b:62:46:56:be:f3:64:bc:be:06: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EE:AF:49:5C:A3:FC:E5:64:9B:06:A7:9F:DD:D5:C7:E6:4B:51:61 X509v3 Authority Key Identifier: keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:45:52:ed:f8:13:66:f3:64:d2:ce:d0:9b:5f:38:7a:fe:a9: 41:d5:b4:d6:40:ab:57:a9:bd:b7:f4:74:d0:c8:ba:db:ad:9d: ec:6b:20:89:51:1a:db:9e:b5:8a:01:1a:8f:f2:b4:a6:f1:47: b0:8a:c4:44:90:fb:a6:23:c9:56:23:3b:2a:82:eb:f1:69:1f: cd:58:1f:f6:15:10:53:6f:da:17:80:38:26:28:82:55:7a:08: 80:06:47:17:b1:28:a9:55:59:66:50:b9:7f:d1:3e:e4:7e:59: 9f:7a:a3:d8:05:bd:a1:67:9f:d0:55:b5:12:5f:0d:aa:ad:26: b6:92:5f:35:56:9a:24:5d:32:36:42:33:c1:35:51:f6:1e:b9: 57:c3:71:c0:b4:44:ef:91:dd:fb:be:c7:6a:77:b2:86:ec:f7: 4d:ab:0d:c3:60:b4:14:54:75:70:57:db:06:24:7b:ad:23:a2: e1:d6:c8:75:7e:6f:71:b4:c8:3c:7c:0c:69:9f:1e:d3:9a:fc: 65:d3:67:0c:6b:0e:d7:46:06:65:26:43:af:da:ef:93:58:d8: d2:3f:2a:0b:61:71:31:87:05:55:b8:1c:5f:4e:61:de:82:68: 71:c0:7a:9d:c4:59:74:26:fb:80:66:ac:73:84:37:da:7d:2e: 96:b5:12:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE2QUMxMTAvBgNVBAUTKEZFNUYxQzc1MDA0OEJCNTRFMDEzNzNBQzNFREQ0Qjc3 N0Q4ODhFNzkwHhcNMjUwNTMwMjM0MDE4WhcNMjUwNjA2MjM0MDE4WjAYMRYwFAYD VQQDEw02ODNhNDFlMy0wYThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlX0UYw0YIi7CgfJwroe4SkPTVaTTa2QmM3fKojlFh3XaG6R8e6mNBvrzgjuE e6e8PPrPlSdVYeU34I6UqhFwM7qzcHWJaPEh/UNfL0JvVyg+gxo9J4drvY+opiGP mwV+pVla8WMIA9ZDdDdwVondtFGkr5/s9k7gbjMR+oJ1MFkQg2cILiVw9g+P7euM GC3z7l803/YrQoeqBIXOry7qSZdlKb1jnWbDhI5nYBAspVWbWRwPyGurugIuqz+Q 0zGTqhIYjRPv5I7CmJPdqN1+38GCQtm6Tp9/HZuY1PTTdjf0HbDQqph6n2AY38ub jkfpWreD4BtiRla+82S8vgbYrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPur0lc o/zlZJsGp5/d1cfmS1FhMB8GA1UdIwQYMBaAFP5fHHUASLtU4BNzrD7dS3d9iI55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTZBQy8zOEQyMzcyMkY2 MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUxVGdFM09zUHQxTGQzMklq bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sOGNkUUJJdTFUZ0UzT3NQdDFMZDMySWpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTZBQy8zOEQyMzcyMkY2MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUx VGdFM09zUHQxTGQzMklqbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuRVLt+BNm82TSztCbXzh6/qlB1bTWQKtXqb239HTQyLrbrZ3sayCJ URrbnrWKARqP8rSm8UewisREkPumI8lWIzsqguvxaR/NWB/2FRBTb9oXgDgmKIJV egiABkcXsSipVVlmULl/0T7kflmfeqPYBb2hZ5/QVbUSXw2qrSa2kl81VpokXTI2 QjPBNVH2HrlXw3HAtETvkd37vsdqd7KG7PdNqw3DYLQUVHVwV9sGJHutI6Lh1sh1 fm9xtMg8fAxpnx7Tmvxl02cMaw7XRgZlJkOv2u+TWNjSPyoLYXExhwVVuBxfTmHe gmhxwHqdxFl0JvuAZqxzhDfafS6WtRLX -----END CERTIFICATE-----Generated at Sat May 31 17:53:06 2025 by rpki-client